Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated uCheck if you run itEPSS 0.49%Aug 13, 2025
- Low3.1An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have alCheck if you run itEPSS 0.26%Aug 13, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated useCheck if you run itEPSS 0.39%Aug 13, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated usersCheck if you run itEPSS 0.39%Aug 13, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account tCheck if you run itEPSS 0.32%Aug 13, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve storedCheck if you run itEPSS 0.32%Aug 13, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have alCheck if you run itEPSS 0.32%Aug 13, 2025
- Medium6.5An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated useCheck if you run itEPSS 0.34%Aug 13, 2025
- High7.8NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue.Check if you run itEPSS 0.65%Aug 13, 2025
- High7.8NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions.Check if you run itEPSS 0.21%Aug 13, 2025
- Medium5.3A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services.Check if you run itEPSS 0.17%Aug 13, 2025
- Medium5.6A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key (CAK).Check if you run itEPSS 0.12%Aug 13, 2025
- Medium5.9A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's outputCheck if you run itEPSS 0.16%Aug 13, 2025
- Medium4.8An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanniCheck if you run itEPSS 0.18%Aug 13, 2025
- Medium4.8A vulnerability was found in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.33%Aug 13, 2025
- Medium6.9An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset AttCheck if you run itEPSS 0.49%Aug 13, 2025
- Medium6.3NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memoryCheck if you run itEPSS 0.41%Aug 13, 2025
- High8.7When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.34%Aug 13, 2025
- High8.8F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity.Check if you run itEPSS 0.25%Aug 13, 2025
- High8.7When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cCheck if you run itEPSS 0.34%Aug 13, 2025
- Medium5.3OMERO.web provides a web based client and plugin infrastructure.Check if you run itEPSS 0.26%Aug 13, 2025
- Medium6.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.41%Aug 13, 2025
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.26%Aug 13, 2025
- High7.6ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.55%Aug 13, 2025
- Critical9.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 7.50%Aug 13, 2025
Sort